Juniper CoS 基本配置说明

cfsky

　　Juniper CoS 基本配置说明
　　QoS（quality of service）是cisco的叫法，类似的叫法，在Juniper为CoS（class of service）。
　　CoS在外企的Juniper设备上配置比较多，在国内用户的设备上见到很少。
　　CoS基本都是一个AS里面都关联起来的，可以用node 形容单台设备，CoS是由classification，policing ，queuing/scheduling,shaping,remarking组成，最少可以只配置分类和队列；其它都是可选。

　　通过show>　　classification：中一般用到字段是dscp，tos（inet-precedenc）；RFC 791中定义的IP包头说明了ToS字段的位置；DSCP字段是在RFC 2474和2475中定义的，其目的是代替ToS字段。前六位用来分类，后两位目前没有使用。还有用到的字段是二层中的ieee-802.1和ieee-802.1ad，mpls 里面的exp，IPV6中的dscp-ipv6。
　　classification 的配置分为三种：BA（Behavior aggregate），根据cos标记；MF（multifield）根据数据包头部字节；或是两种的混合模式。当MF和BA的配置有重合的部分时，以MF为准。classification是关联在物理接口上的，为policing和schedulers服务的，决定数据包在congestion的情况下的丢弃优先级。

　　policing：管制的配置较简单，出发条件为bandwidth（和其它的触发条件类似，具体带宽或百分比）和burst>　　Queuing/Scheduling :配置主要由transmission-rate，priority，buffer-size，drop-profile-map，shaping-rate。其中shaping-rate和transmission-rate类似policer里面，可以配置为百分比，具体带宽，remainder。priority有strict-high，high，medium-high，medium-low，low。其中strict-high是做带宽保证用的，决定保证。drop-profile-map可以为线性或是跳跃性。buffer-size可以配置percent，temporal（时间，单位为ms），reminder。shaping-rate可以配置percent或是具体数值。
　　Shaping暂时只在schedulers里面配置过，通过help apropos shaping看到也可以在interfaces和class-of-service traffic-control-profiles中使用，后续我查查KB，看看具体的使用案例。
　　Remarking的配置跟classification比较类似，针对的流量出接口分配的优先级，code-point。
　　参考day one 做的配置，
　　classification：
　　BA：

　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set> unit >　　MF：
　　set firewall family inet filter mf-classifier term voice from protocol udp
　　set firewall family inet filter mf-classifier term voice from port 16384-32767
　　set firewall family inet filter mf-classifier term voice then loss-priority low
　　set firewall family inet filter mf-classifier term voice then forwarding-class voice
　　set firewall family inet filter mf-classifier term voice then accept
　　set firewall family inet filter mf-classifier term interactive-video from protocol udp
　　set firewall family inet filter mf-classifier term interactive-video from protocol tcp
　　set firewall family inet filter mf-classifier term interactive-video from port 6060-6061
　　set firewall family inet filter mf-classifier term interactive-video then loss-priority low
　　set firewall family inet filter mf-classifier term interactive-video then forwarding-class video
　　set firewall family inet filter mf-classifier term interactive-video then accept
　　set firewall family inet filter mf-classifier term call-sgnaling from protocol tcp
　　set firewall family inet filter mf-classifier term call-sgnaling from port 1720
　　set firewall family inet filter mf-classifier term call-sgnaling then loss-priority high
　　set firewall family inet filter mf-classifier term call-sgnaling then forwarding-class video
　　set firewall family inet filter mf-classifier term call-sgnaling then accept
　　set firewall family inet filter mf-classifier term ssh-telnet from protocol tcp
　　set firewall family inet filter mf-classifier term ssh-telnet from port telnet
　　set firewall family inet filter mf-classifier term ssh-telnet from port ssh
　　set firewall family inet filter mf-classifier term ssh-telnet then loss-priority high
　　set firewall family inet filter mf-classifier term ssh-telnet then forwarding-class nc
　　set firewall family inet filter mf-classifier term ssh-telnet then accept
　　set firewall family inet filter mf-classifier term imcp-police from protocol icmp
　　set firewall family inet filter mf-classifier term imcp-police from protocol icmp6
　　set firewall family inet filter mf-classifier term imcp-police then policer icmp-5m-limit
　　set firewall family inet filter mf-classifier term imcp-police then forwarding-class data
　　set firewall family inet filter mf-classifier term imcp-police then accept
　　set firewall family inet filter mf-classifier term be-intranet from protocol tcp
　　set firewall family inet filter mf-classifier term be-intranet from port 8080
　　set firewall family inet filter mf-classifier term be-intranet then policer fc-250m-be-limit
　　set firewall family inet filter mf-classifier term be-intranet then forwarding-class data
　　set firewall family inet filter mf-classifier term be-intranet then accept
　　set firewall family inet filter mf-classifier term be-traffic from protocol tcp
　　set firewall family inet filter mf-classifier term be-traffic from port ftp
　　set firewall family inet filter mf-classifier term be-traffic from port ftp-data
　　set firewall family inet filter mf-classifier term be-traffic from port http
　　set firewall family inet filter mf-classifier term be-traffic from port https
　　set firewall family inet filter mf-classifier term be-traffic then loss-priority high
　　set firewall family inet filter mf-classifier term be-traffic then forwarding-class data
　　set firewall family inet filter mf-classifier term be-traffic then accept
　　set firewall family inet filter mf-classifier term all-else then accept
　　set firewall policer icmp-5m-limit if-exceeding bandwidth-limit 5m
　　set firewall policer icmp-5m-limit if-exceeding burst-size-limit 15k
　　set firewall policer icmp-5m-limit then discard
　　set firewall policer fc-250m-be-limit if-exceeding bandwidth-limit 250m
　　set firewall policer fc-250m-be-limit if-exceeding burst-size-limit 625k
　　set firewall policer fc-250m-be-limit then loss-priority low
　　set firewall policer fc-250m-be-limit then forwarding-class data
　　set interfaces ge-0/0/2 unit 0 family inet filter input mf-classifier
　　Queuing/Scheduling：

　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>
　　set>　　Remarking：

　　set>
　　set>
　　set>
　　set>
　　set>　　set> unit  rewrite-rules dscp dscp-remarking